https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:55:26 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-05210 bdu:2026-05210 https://cve.radiocsirt.org/vuln/bdu:2026-05210 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0871 certfr-2025-avi-0871 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0871 https://cve.radiocsirt.org/vuln/cnvd-2025-24143 cnvd-2025-24143 https://cve.radiocsirt.org/vuln/cnvd-2025-24143 https://cve.radiocsirt.org/vuln/euvd-2026-350984 EUVD-2026-350984 https://cve.radiocsirt.org/vuln/euvd-2026-350984 https://cve.radiocsirt.org/vuln/fkie_cve-2025-58903 <p>An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the http daemon via a specialy crafted request.</p> <p>An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the http daemon via a specialy crafted request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-58903 https://cve.radiocsirt.org/vuln/ghsa-9rvw-gg78-wfm7 <p>An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the http daemon via a specialy crafted request.</p> <p>An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the http daemon via a specialy crafted request.</p> https://cve.radiocsirt.org/vuln/ghsa-9rvw-gg78-wfm7 https://cve.radiocsirt.org/vuln/icsa-25-135-01 <p>An insufficiently protected credentials vulnerability in FortiOS may allow a privileged authenticated attacker to retrieve LDAP credentials via modifying the LDAP server IP address in the FortiOS configuration to point to a malicious attacker-controlled server. An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions may allow an attacker in possession of a cookie used to log in the SSL-VPN portal to log in again, although the session has expired or was logged out. A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets. An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions may allow a remote unauthenticated user to bypass the DNS filter via Apple devices. An Authentication Bypass Using an Alternate Path or Channel vulnerability in FortiOS and FortiProxy may allow an authenticated attacker to elevate their privileges via triggering a malicious Webhook action in the Automation Stitch component. An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below,…</p> <p>An insufficiently protected credentials vulnerability in FortiOS may allow a privileged authenticated attacker to retrieve LDAP credentials via modifying the LDAP server IP address in the FortiOS configuration to point to a malicious attacker-controlled server. An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions may allow an attacker in possession of a cookie used to log in the SSL-VPN portal to log in again, although the session has expired or was logged out. A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets. An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions may allow a remote unauthenticated user to bypass the DNS filter via Apple devices. An Authentication Bypass Using an Alternate Path or Channel vulnerability in FortiOS and FortiProxy may allow an authenticated attacker to elevate their privileges via triggering a malicious Webhook action in the Automation Stitch component. An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below,…</p> https://cve.radiocsirt.org/vuln/icsa-25-135-01 https://cve.radiocsirt.org/vuln/ssa-864900 <p>Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products.</p> <p>Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.</p> <p>Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products.</p> <p>Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.</p> https://cve.radiocsirt.org/vuln/ssa-864900 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2283 <p>Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen oder Code auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen oder Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2283